[Bug 1996787] New: objectweb-asm has missing osgi metadata since the upgrade to 9.1
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1996787
Bug ID: 1996787
Summary: objectweb-asm has missing osgi metadata since the
upgrade to 9.1
Product: Fedora
Version: rawhide
Status: NEW
Component: objectweb-asm
Assignee: mizdebsk(a)redhat.com
Reporter: sergio(a)serjux.com
QA Contact: extras-qa(a)fedoraproject.org
CC: dwalluck(a)redhat.com, fnasser(a)redhat.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jerboaa(a)gmail.com, mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
Description of problem:
objectweb-asm has missing osgi metadata since the upgrade to 9.1
Version-Release number of selected component (if applicable):
objectweb-asm-9.1-3.fc35.noarch.rpm
--
You are receiving this mail because:
You are on the CC list for the bug.
1 year, 9 months
[Bug 2058763] New: CVE-2022-24614 metadata-extractor: Out-of-memory when reading a specially crafted JPEG file
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2058763
Bug ID: 2058763
Summary: CVE-2022-24614 metadata-extractor: Out-of-memory when
reading a specially crafted JPEG file
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: psampaio(a)redhat.com
CC: aileenc(a)redhat.com, alazarot(a)redhat.com,
anstephe(a)redhat.com, bibryam(a)redhat.com,
cedric.olivier(a)free.fr, chazlett(a)redhat.com,
drieden(a)redhat.com, emingora(a)redhat.com,
etirelli(a)redhat.com, extras-orphan(a)fedoraproject.org,
ggaughan(a)redhat.com, gmalinko(a)redhat.com,
hbraun(a)redhat.com, ibek(a)redhat.com,
janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jochrist(a)redhat.com, jolee(a)redhat.com,
jrokos(a)redhat.com, jschatte(a)redhat.com,
jstastny(a)redhat.com, jwon(a)redhat.com,
krathod(a)redhat.com, kverlaen(a)redhat.com,
mnovotny(a)redhat.com, pantinor(a)redhat.com,
pdelbell(a)redhat.com, pjindal(a)redhat.com,
puntogil(a)libero.it, rguimara(a)redhat.com,
rrajasek(a)redhat.com, tzimanyi(a)redhat.com
Target Milestone: ---
Classification: Other
When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can
be made to allocate large amounts of memory that finally leads to an
out-of-memory error even for very small inputs. This could be used to mount a
denial of service attack against services that use metadata-extractor library.
Upstream bug:
https://github.com/drewnoakes/metadata-extractor/issues/561
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2058763
1 year, 10 months
[Bug 2004820] New: CVE-2021-41079 tomcat: Apache Tomcat DoS with unexpected TLS packet
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2004820
Bug ID: 2004820
Summary: CVE-2021-41079 tomcat: Apache Tomcat DoS with
unexpected TLS packet
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: jwon(a)redhat.com
CC: aileenc(a)redhat.com, akoufoud(a)redhat.com,
alazarot(a)redhat.com, alee(a)redhat.com,
almorale(a)redhat.com, anstephe(a)redhat.com,
asoldano(a)redhat.com, atangrin(a)redhat.com,
avibelli(a)redhat.com, bbaranow(a)redhat.com,
bgeorges(a)redhat.com, bmaxwell(a)redhat.com,
brian.stansberry(a)redhat.com, cdewolf(a)redhat.com,
chazlett(a)redhat.com, cmoulliard(a)redhat.com,
coolsvap(a)gmail.com, csutherl(a)redhat.com,
darran.lofthouse(a)redhat.com, dbecker(a)redhat.com,
dkreling(a)redhat.com, dosoudil(a)redhat.com,
drieden(a)redhat.com, eleandro(a)redhat.com,
etirelli(a)redhat.com, fjuma(a)redhat.com,
ggaughan(a)redhat.com, gmalinko(a)redhat.com,
gzaronikas(a)gmail.com, gzaronik(a)redhat.com,
huwang(a)redhat.com, ibek(a)redhat.com,
ikanello(a)redhat.com, ivan.afonichev(a)gmail.com,
iweiss(a)redhat.com, janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jclere(a)redhat.com, jjoyce(a)redhat.com,
jochrist(a)redhat.com, jolee(a)redhat.com,
jpallich(a)redhat.com, jperkins(a)redhat.com,
jrokos(a)redhat.com, jschatte(a)redhat.com,
jschluet(a)redhat.com, jstastny(a)redhat.com,
jwon(a)redhat.com, krathod(a)redhat.com,
krzysztof.daniel(a)gmail.com, kverlaen(a)redhat.com,
kwills(a)redhat.com, lgao(a)redhat.com, lhh(a)redhat.com,
lpeer(a)redhat.com, lthon(a)redhat.com, mburns(a)redhat.com,
mkolesni(a)redhat.com, mnovotny(a)redhat.com,
msochure(a)redhat.com, msvehla(a)redhat.com,
mszynkie(a)redhat.com, nwallace(a)redhat.com,
pdelbell(a)redhat.com, peholase(a)redhat.com,
pgallagh(a)redhat.com, pjindal(a)redhat.com,
pmackay(a)redhat.com, rguimara(a)redhat.com,
rhcs-maint(a)redhat.com, rrajasek(a)redhat.com,
rruss(a)redhat.com, rstancel(a)redhat.com,
rsvoboda(a)redhat.com, sclewis(a)redhat.com,
scohen(a)redhat.com, slinaber(a)redhat.com,
smaestri(a)redhat.com, szappis(a)redhat.com,
tom.jenkinson(a)redhat.com, tzimanyi(a)redhat.com,
yborgess(a)redhat.com
Blocks: 2004799
Target Milestone: ---
Classification: Other
Apache Tomcat did not properly validate incoming TLS packets. When Tomcat was
configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted
packet could be used to trigger an infinite loop resulting in a denial of
service. This issue affects the version of Apache Tomcat 10.0.0-M1 to 10.0.2;
9.0.0-M1 to 9.0.43; 8.5.0 to 8.5.63.
Upstream commits:
Tomcat 10.0.4:
https://github.com/apache/tomcat/commit/34115fb3c83f6cd97772232316a492a4c...
Tomcat 9.0.44:
https://github.com/apache/tomcat/commit/d4b340fa8feaf55831f9a59350578f7b6...
Tomcat 8.5.64:
https://github.com/apache/tomcat/commit/b90d4fc1ff44f30e4b3aba622ba6677e3...
Reference:
https://lists.apache.org/thread.html/rccdef0349fdf4fb73a4e4403095446d7fe6...
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2004820
1 year, 10 months
[Bug 1981544] New: CVE-2021-30640 tomcat: JNDI realm authentication weakness
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1981544
Bug ID: 1981544
Summary: CVE-2021-30640 tomcat: JNDI realm authentication
weakness
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: aileenc(a)redhat.com, akoufoud(a)redhat.com,
alazarot(a)redhat.com, alee(a)redhat.com,
almorale(a)redhat.com, anstephe(a)redhat.com,
asoldano(a)redhat.com, atangrin(a)redhat.com,
avibelli(a)redhat.com, bbaranow(a)redhat.com,
bgeorges(a)redhat.com, bmaxwell(a)redhat.com,
brian.stansberry(a)redhat.com, cdewolf(a)redhat.com,
chazlett(a)redhat.com, cmoulliard(a)redhat.com,
coolsvap(a)gmail.com, csutherl(a)redhat.com,
darran.lofthouse(a)redhat.com, dbecker(a)redhat.com,
dkreling(a)redhat.com, dosoudil(a)redhat.com,
drieden(a)redhat.com, eleandro(a)redhat.com,
etirelli(a)redhat.com, fjuma(a)redhat.com,
ggaughan(a)redhat.com, gmalinko(a)redhat.com,
gzaronik(a)redhat.com, huwang(a)redhat.com,
ibek(a)redhat.com, ikanello(a)redhat.com,
ivan.afonichev(a)gmail.com, iweiss(a)redhat.com,
janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jclere(a)redhat.com, jjoyce(a)redhat.com,
jochrist(a)redhat.com, jolee(a)redhat.com,
jpallich(a)redhat.com, jperkins(a)redhat.com,
jrokos(a)redhat.com, jschatte(a)redhat.com,
jschluet(a)redhat.com, jstastny(a)redhat.com,
jwon(a)redhat.com, krathod(a)redhat.com,
krzysztof.daniel(a)gmail.com, kverlaen(a)redhat.com,
kwills(a)redhat.com, lgao(a)redhat.com, lhh(a)redhat.com,
lpeer(a)redhat.com, lthon(a)redhat.com, mburns(a)redhat.com,
mkolesni(a)redhat.com, mnovotny(a)redhat.com,
msochure(a)redhat.com, msvehla(a)redhat.com,
mszynkie(a)redhat.com, nwallace(a)redhat.com,
peholase(a)redhat.com, pgallagh(a)redhat.com,
pjindal(a)redhat.com, pmackay(a)redhat.com,
rguimara(a)redhat.com, rhcs-maint(a)redhat.com,
rrajasek(a)redhat.com, rruss(a)redhat.com,
rstancel(a)redhat.com, rsvoboda(a)redhat.com,
sclewis(a)redhat.com, scohen(a)redhat.com,
slinaber(a)redhat.com, smaestri(a)redhat.com,
szappis(a)redhat.com, tom.jenkinson(a)redhat.com,
tzimanyi(a)redhat.com, yborgess(a)redhat.com
Target Milestone: ---
Classification: Other
A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to
authenticate using variations of a valid user name and/or to bypass some of the
protection provided by the LockOut Realm. This issue affects Apache Tomcat
10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65.
Reference:
https://lists.apache.org/thread.html/r59f9ef03929d32120f91f4ea7e6e79edd56...
--
You are receiving this mail because:
You are on the CC list for the bug.
1 year, 10 months
[Bug 1981533] New: CVE-2021-33037 tomcat: HTTP request smuggling when used with a reverse proxy
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1981533
Bug ID: 1981533
Summary: CVE-2021-33037 tomcat: HTTP request smuggling when
used with a reverse proxy
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: aileenc(a)redhat.com, akoufoud(a)redhat.com,
alazarot(a)redhat.com, alee(a)redhat.com,
almorale(a)redhat.com, anstephe(a)redhat.com,
asoldano(a)redhat.com, atangrin(a)redhat.com,
avibelli(a)redhat.com, bbaranow(a)redhat.com,
bgeorges(a)redhat.com, bmaxwell(a)redhat.com,
brian.stansberry(a)redhat.com, cdewolf(a)redhat.com,
chazlett(a)redhat.com, cmoulliard(a)redhat.com,
coolsvap(a)gmail.com, csutherl(a)redhat.com,
darran.lofthouse(a)redhat.com, dbecker(a)redhat.com,
dkreling(a)redhat.com, dosoudil(a)redhat.com,
drieden(a)redhat.com, eleandro(a)redhat.com,
etirelli(a)redhat.com, fjuma(a)redhat.com,
ggaughan(a)redhat.com, gmalinko(a)redhat.com,
gzaronik(a)redhat.com, huwang(a)redhat.com,
ibek(a)redhat.com, ikanello(a)redhat.com,
ivan.afonichev(a)gmail.com, iweiss(a)redhat.com,
janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jclere(a)redhat.com, jjoyce(a)redhat.com,
jochrist(a)redhat.com, jolee(a)redhat.com,
jpallich(a)redhat.com, jperkins(a)redhat.com,
jrokos(a)redhat.com, jschatte(a)redhat.com,
jschluet(a)redhat.com, jstastny(a)redhat.com,
jwon(a)redhat.com, krathod(a)redhat.com,
krzysztof.daniel(a)gmail.com, kverlaen(a)redhat.com,
kwills(a)redhat.com, lgao(a)redhat.com, lhh(a)redhat.com,
lpeer(a)redhat.com, lthon(a)redhat.com, mburns(a)redhat.com,
mkolesni(a)redhat.com, mnovotny(a)redhat.com,
msochure(a)redhat.com, msvehla(a)redhat.com,
mszynkie(a)redhat.com, nwallace(a)redhat.com,
peholase(a)redhat.com, pgallagh(a)redhat.com,
pjindal(a)redhat.com, pmackay(a)redhat.com,
rguimara(a)redhat.com, rhcs-maint(a)redhat.com,
rrajasek(a)redhat.com, rruss(a)redhat.com,
rstancel(a)redhat.com, rsvoboda(a)redhat.com,
sclewis(a)redhat.com, scohen(a)redhat.com,
slinaber(a)redhat.com, smaestri(a)redhat.com,
szappis(a)redhat.com, tom.jenkinson(a)redhat.com,
tzimanyi(a)redhat.com, yborgess(a)redhat.com
Target Milestone: ---
Classification: Other
Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did
not correctly parse the HTTP transfer-encoding request header in some
circumstances leading to the possibility to request smuggling when used with a
reverse proxy. Specifically: - Tomcat incorrectly ignored the transfer encoding
header if the client declared it would only accept an HTTP/1.0 response; -
Tomcat honoured the identify encoding; and - Tomcat did not ensure that, if
present, the chunked encoding was the final encoding.
Reference:
https://lists.apache.org/thread.html/r612a79269b0d5e5780c62dfd34286a80372...
--
You are receiving this mail because:
You are on the CC list for the bug.
1 year, 10 months
[Bug 1973413] New: CVE-2021-33813 jdom: XXE allows attackers to cause a DoS via a crafted HTTP request
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1973413
Bug ID: 1973413
Summary: CVE-2021-33813 jdom: XXE allows attackers to cause a
DoS via a crafted HTTP request
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: aileenc(a)redhat.com, akoufoud(a)redhat.com,
alazarot(a)redhat.com, almorale(a)redhat.com,
anstephe(a)redhat.com, aos-bugs(a)redhat.com,
asoldano(a)redhat.com, atangrin(a)redhat.com,
ataylor(a)redhat.com, bbaranow(a)redhat.com,
bibryam(a)redhat.com, bmaxwell(a)redhat.com,
bmontgom(a)redhat.com, brian.stansberry(a)redhat.com,
cdewolf(a)redhat.com, chazlett(a)redhat.com,
darran.lofthouse(a)redhat.com, dbhole(a)redhat.com,
dkreling(a)redhat.com, dosoudil(a)redhat.com,
drieden(a)redhat.com, eleandro(a)redhat.com,
eparis(a)redhat.com, etirelli(a)redhat.com,
fjuma(a)redhat.com, ggaughan(a)redhat.com,
gmalinko(a)redhat.com, gvarsami(a)redhat.com,
hbraun(a)redhat.com, hhorak(a)redhat.com, ibek(a)redhat.com,
iweiss(a)redhat.com, janstey(a)redhat.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jburrell(a)redhat.com, jcoleman(a)redhat.com,
jochrist(a)redhat.com, jokerman(a)redhat.com,
jolee(a)redhat.com, jorton(a)redhat.com,
jpallich(a)redhat.com, jperkins(a)redhat.com,
jrokos(a)redhat.com, jross(a)redhat.com,
jschatte(a)redhat.com, jstastny(a)redhat.com,
jwon(a)redhat.com, kconner(a)redhat.com,
krathod(a)redhat.com, krzysztof.daniel(a)gmail.com,
kverlaen(a)redhat.com, kwills(a)redhat.com,
ldimaggi(a)redhat.com, lgao(a)redhat.com,
loleary(a)redhat.com, mat.booth(a)gmail.com,
mizdebsk(a)redhat.com, mkoncek(a)redhat.com,
mnovotny(a)redhat.com, msochure(a)redhat.com,
msrb(a)redhat.com, msvehla(a)redhat.com,
nstielau(a)redhat.com, nwallace(a)redhat.com,
pantinor(a)redhat.com, pjindal(a)redhat.com,
pmackay(a)redhat.com, puntogil(a)libero.it,
rguimara(a)redhat.com, rrajasek(a)redhat.com,
rstancel(a)redhat.com, rsvoboda(a)redhat.com,
rwagner(a)redhat.com, sd-operator-metering(a)redhat.com,
smaestri(a)redhat.com, sochotni(a)redhat.com,
spinder(a)redhat.com, sponnaga(a)redhat.com,
tcunning(a)redhat.com, tflannag(a)redhat.com,
theute(a)redhat.com, tkirby(a)redhat.com,
tom.jenkinson(a)redhat.com, tzimanyi(a)redhat.com,
yborgess(a)redhat.com
Target Milestone: ---
Classification: Other
An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a
denial of service via a crafted HTTP request.
References:
https://alephsecurity.com/vulns/aleph-2021003
http://jdom.org/news/index.html
Upstream patch:
https://github.com/hunterhacker/jdom/pull/188
--
You are receiving this mail because:
You are on the CC list for the bug.
1 year, 10 months
[Bug 1966735] New: CVE-2021-29505 XStream: remote command execution attack by manipulating the processed input stream
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1966735
Bug ID: 1966735
Summary: CVE-2021-29505 XStream: remote command execution
attack by manipulating the processed input stream
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: abenaiss(a)redhat.com, aileenc(a)redhat.com,
akoufoud(a)redhat.com, alazarot(a)redhat.com,
almorale(a)redhat.com, anstephe(a)redhat.com,
aos-bugs(a)redhat.com, ataylor(a)redhat.com,
bibryam(a)redhat.com, bmontgom(a)redhat.com,
chazlett(a)redhat.com, dchen(a)redhat.com,
drieden(a)redhat.com, eparis(a)redhat.com,
etirelli(a)redhat.com, ggaughan(a)redhat.com,
gmalinko(a)redhat.com, gvarsami(a)redhat.com,
hbraun(a)redhat.com, ibek(a)redhat.com,
janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jburrell(a)redhat.com, jcoleman(a)redhat.com,
jochrist(a)redhat.com, jokerman(a)redhat.com,
jolee(a)redhat.com, jrokos(a)redhat.com, jross(a)redhat.com,
jschatte(a)redhat.com, jstastny(a)redhat.com,
jwon(a)redhat.com, kconner(a)redhat.com,
krathod(a)redhat.com, kverlaen(a)redhat.com,
ldimaggi(a)redhat.com, lkundrak(a)v3.sk,
mizdebsk(a)redhat.com, mnovotny(a)redhat.com,
nstielau(a)redhat.com, nwallace(a)redhat.com,
pantinor(a)redhat.com, pbhattac(a)redhat.com,
pjindal(a)redhat.com, rrajasek(a)redhat.com,
rwagner(a)redhat.com, sponnaga(a)redhat.com,
tcunning(a)redhat.com, tkirby(a)redhat.com,
tzimanyi(a)redhat.com, vbobade(a)redhat.com
Target Milestone: ---
Classification: Other
The vulnerability may allow a remote attacker has sufficient rights to execute
commands of the host only by manipulating the processed input stream. No user
is affected, who followed the recommendation to setup XStream's security
framework with a whitelist limited to the minimal required types.
Reference:
https://github.com/x-stream/xstream/security/advisories/GHSA-7chv-rrw6-w6fc
--
You are receiving this mail because:
You are on the CC list for the bug.
1 year, 10 months
[Bug 1934032] New: CVE-2021-25122 tomcat: Request mix-up with h2c
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1934032
Bug ID: 1934032
Summary: CVE-2021-25122 tomcat: Request mix-up with h2c
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: jwon(a)redhat.com
CC: aboyko(a)redhat.com, aileenc(a)redhat.com,
akoufoud(a)redhat.com, alazarot(a)redhat.com,
alee(a)redhat.com, almorale(a)redhat.com,
anstephe(a)redhat.com, asoldano(a)redhat.com,
atangrin(a)redhat.com, avibelli(a)redhat.com,
bbaranow(a)redhat.com, bgeorges(a)redhat.com,
bmaxwell(a)redhat.com, brian.stansberry(a)redhat.com,
cdewolf(a)redhat.com, chazlett(a)redhat.com,
cmoulliard(a)redhat.com, coolsvap(a)gmail.com,
csutherl(a)redhat.com, darran.lofthouse(a)redhat.com,
dbecker(a)redhat.com, dkreling(a)redhat.com,
dosoudil(a)redhat.com, drieden(a)redhat.com,
eleandro(a)redhat.com, etirelli(a)redhat.com,
fjuma(a)redhat.com, ggaughan(a)redhat.com,
gmalinko(a)redhat.com, gzaronik(a)redhat.com,
huwang(a)redhat.com, ibek(a)redhat.com,
ikanello(a)redhat.com, ivan.afonichev(a)gmail.com,
iweiss(a)redhat.com, janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jclere(a)redhat.com, jjoyce(a)redhat.com,
jochrist(a)redhat.com, jolee(a)redhat.com,
jpallich(a)redhat.com, jperkins(a)redhat.com,
jschatte(a)redhat.com, jschluet(a)redhat.com,
jstastny(a)redhat.com, jwon(a)redhat.com,
krathod(a)redhat.com, krzysztof.daniel(a)gmail.com,
kverlaen(a)redhat.com, kwills(a)redhat.com,
lgao(a)redhat.com, lhh(a)redhat.com, lpeer(a)redhat.com,
lthon(a)redhat.com, mburns(a)redhat.com,
mkolesni(a)redhat.com, mnovotny(a)redhat.com,
msochure(a)redhat.com, msvehla(a)redhat.com,
mszynkie(a)redhat.com, nwallace(a)redhat.com,
pgallagh(a)redhat.com, pjindal(a)redhat.com,
pmackay(a)redhat.com, rguimara(a)redhat.com,
rhcs-maint(a)redhat.com, rrajasek(a)redhat.com,
rruss(a)redhat.com, rstancel(a)redhat.com,
rsvoboda(a)redhat.com, rsynek(a)redhat.com,
sclewis(a)redhat.com, scohen(a)redhat.com,
sdaley(a)redhat.com, slinaber(a)redhat.com,
smaestri(a)redhat.com, szappis(a)redhat.com,
tom.jenkinson(a)redhat.com, yborgess(a)redhat.com
Blocks: 1934001
Target Milestone: ---
Classification: Other
When responding to new h2c connection requests, Apache Tomcat could duplicate
request headers and a limited amount of request body from one request to
another meaning user A and user B could both see the results of user A's
request.
Upstream commits:
Tomcat 10.0:
https://github.com/apache/tomcat/commit/dd757c0a893e2e35f8bc1385d6967221a...
Tomcat 9.0:
https://github.com/apache/tomcat/commit/d47c20a776e8919eaca8da9390a32bc8b...
Tomcat 8.5:
https://github.com/apache/tomcat/commit/bb0e7c1e0d737a0de7d794572517bce0e...
Reference:
http://mail-archives.apache.org/mod_mbox/tomcat-announce/202103.mbox/%3Cb...
--
You are receiving this mail because:
You are on the CC list for the bug.
1 year, 10 months
[Bug 1934061] New: CVE-2021-25329 tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1934061
Bug ID: 1934061
Summary: CVE-2021-25329 tomcat: Incomplete fix for
CVE-2020-9484 (RCE via session persistence)
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: jwon(a)redhat.com
CC: aboyko(a)redhat.com, aileenc(a)redhat.com,
akoufoud(a)redhat.com, alazarot(a)redhat.com,
alee(a)redhat.com, almorale(a)redhat.com,
anstephe(a)redhat.com, asoldano(a)redhat.com,
atangrin(a)redhat.com, avibelli(a)redhat.com,
bbaranow(a)redhat.com, bgeorges(a)redhat.com,
bmaxwell(a)redhat.com, brian.stansberry(a)redhat.com,
cdewolf(a)redhat.com, chazlett(a)redhat.com,
cmoulliard(a)redhat.com, coolsvap(a)gmail.com,
csutherl(a)redhat.com, darran.lofthouse(a)redhat.com,
dbecker(a)redhat.com, dkreling(a)redhat.com,
dosoudil(a)redhat.com, drieden(a)redhat.com,
eleandro(a)redhat.com, etirelli(a)redhat.com,
fjuma(a)redhat.com, ggaughan(a)redhat.com,
gmalinko(a)redhat.com, gzaronik(a)redhat.com,
huwang(a)redhat.com, ibek(a)redhat.com,
ikanello(a)redhat.com, ivan.afonichev(a)gmail.com,
iweiss(a)redhat.com, janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jclere(a)redhat.com, jjoyce(a)redhat.com,
jochrist(a)redhat.com, jolee(a)redhat.com,
jpallich(a)redhat.com, jperkins(a)redhat.com,
jschatte(a)redhat.com, jschluet(a)redhat.com,
jstastny(a)redhat.com, jwon(a)redhat.com,
krathod(a)redhat.com, krzysztof.daniel(a)gmail.com,
kverlaen(a)redhat.com, kwills(a)redhat.com,
lgao(a)redhat.com, lhh(a)redhat.com, lpeer(a)redhat.com,
lthon(a)redhat.com, mburns(a)redhat.com,
mkolesni(a)redhat.com, mnovotny(a)redhat.com,
msochure(a)redhat.com, msvehla(a)redhat.com,
mszynkie(a)redhat.com, nwallace(a)redhat.com,
pgallagh(a)redhat.com, pjindal(a)redhat.com,
pmackay(a)redhat.com, rguimara(a)redhat.com,
rhcs-maint(a)redhat.com, rrajasek(a)redhat.com,
rruss(a)redhat.com, rstancel(a)redhat.com,
rsvoboda(a)redhat.com, rsynek(a)redhat.com,
sclewis(a)redhat.com, scohen(a)redhat.com,
sdaley(a)redhat.com, slinaber(a)redhat.com,
smaestri(a)redhat.com, szappis(a)redhat.com,
tom.jenkinson(a)redhat.com, yborgess(a)redhat.com
Blocks: 1934010
Target Milestone: ---
Classification: Other
The fix for CVE-2020-9484 was incomplete. When using a highly unlikely
configuration edge case, the Tomcat instance was still vulnerable to
CVE-2020-9484. Note that both the previously published prerequisites for
CVE-2020-9484 and the previously published non-upgrade mitigations for
CVE-2020-9484 also apply to this issue.
Upstream commits:
Tomcat 10.0:
https://github.com/apache/tomcat/commit/6d66e99ef85da93e4d2c2a536ca51aa34...
Tomcat 9.0:
https://github.com/apache/tomcat/commit/4785433a226a20df6acbea49296e1ce7e...
Tomcat 8.5:
https://github.com/apache/tomcat/commit/93f0cc403a9210d469afc2bd9cf03ab32...
Tomcat 7.0:
https://github.com/apache/tomcat/commit/74b105657ffbd1d1de80455f03446c3bb...
Reference:
http://mail-archives.apache.org/mod_mbox/tomcat-announce/202103.mbox/%3C8...
--
You are receiving this mail because:
You are on the CC list for the bug.
1 year, 10 months